[freeside-commits] branch master updated. 1d94d421c28cb157e6cb2f8ff30d1ac85b399b57

[Ivan]

The branch, master has been updated
       via  1d94d421c28cb157e6cb2f8ff30d1ac85b399b57 (commit)
      from  21c46e9e4af497f692dc95b171bf9f6d3f9c66e5 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 1d94d421c28cb157e6cb2f8ff30d1ac85b399b57
Author: Ivan Kohler <ivan at freeside.biz>
Date:   Thu Apr 27 13:07:21 2017 -0700

    access control for List all customers, RT#75012

diff --git a/httemplate/search/cust_main.cgi b/httemplate/search/cust_main.cgi
index 74cc5f3..cce4f0d 100755
--- a/httemplate/search/cust_main.cgi
+++ b/httemplate/search/cust_main.cgi
@@ -352,9 +352,11 @@ my(@cust_main, $sortby, $orderby);
 my @select = ();
 my @addl_headers = ();
 my @addl_cols = ();
-if ( $cgi->param('browse')
-     || $cgi->param('otaker_on')
-     || $cgi->param('agentnum_on')
+if ( (    $cgi->param('browse')
+       || $cgi->param('otaker_on')
+       || $cgi->param('agentnum_on')
+     )
+     and $curuser->access_right('List all customers')
 ) {
 
   my %search = ();

-----------------------------------------------------------------------

Summary of changes:
 httemplate/search/cust_main.cgi |    8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)